Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.

🔭 Tracetest - Build integration and end-to-end tests in minutes, instead of days, using OpenTelemetry and trace-based testing.

eBPF-based Networking, Security, and Observability

Some tools for automated package generation

This repo is a consolidation of Secure Software Supply Chain resources, such as talks, whitepapers, conferences and more.

Trustix: Distributed trust and reproducibility tracking for binary caches [maintainer=@adisbladis]

Supply Chain Security in Tekton Pipelines

The Go programming language

Obfuscate Go builds

Software Supply Chain Transparency Log

A repository for gRFCs

Kube-router, a turnkey solution for Kubernetes networking.

Go compiler frontend (gccgo)

Go Dependency Analysis toolkit

in-toto is a framework to protect supply chain integrity.

A cloud-native Pipeline resource.

Verification component for COVID-19 Exposure Notifications.

A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.

Like hashicorp vault agent + consul-template, for Azure Key Vault

A gRPC production-ready library

A variety of example Go programs to get you comfortable writing Go and contributing to Kubernetes.

A policy management tool for interacting with Gatekeeper

⚡️ Express inspired web framework written in Go

Artifact Metadata API

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

Website: stanke.dev

Extension for Jenkins Configuration-as-Code plugin that allows running Groovy scripts